Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/um3S9xezwBZ9wNEAxUjfSrMIUHc.roa
File: um3S9xezwBZ9wNEAxUjfSrMIUHc.roa (raw, json)
Hash identifier: 6DjTdx/PvsOdF8lY1q439vJsTgR84+mADwJ1sPmX1Yo=
Subject key identifier: BA:6D:D2:F7:17:B3:C0:16:7D:C0:D1:00:C5:48:DF:4A:B3:08:50:77
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 028618D5
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/um3S9xezwBZ9wNEAxUjfSrMIUHc.roa
Signing time: Sat 01 Jan 2022 13:02:57 +0000
ROA not before: Sat 01 Jan 2022 13:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 94.177.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42342613 (0x28618d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 13:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba6dd2f717b3c0167dc0d100c548df4ab3085077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:e4:8c:0c:d7:ea:30:52:36:bc:7d:a2:e4:
d6:04:f0:4c:24:1a:c2:99:44:26:2e:42:35:50:23:
ab:ed:9d:fd:d9:49:15:89:b0:74:ed:9d:e6:39:e3:
e6:02:a0:37:da:58:fc:e1:f2:a7:4a:f6:24:61:dc:
56:5d:1b:79:6f:5c:d6:71:37:3d:4c:84:ca:11:cc:
80:7e:9f:57:3d:2b:a3:1d:ab:e2:0f:4d:34:62:b0:
cf:b6:ab:34:cd:54:9a:92:f4:61:f5:85:95:94:c2:
f7:72:95:57:a6:79:d8:01:2c:4b:8e:39:b6:15:90:
1c:3d:d6:b4:b8:c5:0f:76:cc:99:ce:cf:63:8b:08:
8e:33:32:30:af:8b:99:f9:bc:cf:6c:cc:a1:2d:22:
c1:08:26:de:9a:d1:02:2c:64:1b:c0:a0:fd:c1:23:
2a:08:6f:00:c9:fc:b7:68:b6:0e:61:77:24:cf:e0:
71:8b:db:2b:6e:ae:84:9e:8a:6a:42:fa:af:5e:96:
6c:0b:e6:0a:6d:4c:25:1e:50:0c:88:80:db:38:b7:
ec:91:43:ed:ab:eb:09:8b:2e:84:b9:1c:36:e8:0a:
4b:bd:2b:b8:ab:f4:7e:e5:51:6b:7a:4a:86:cf:5a:
81:18:f8:e6:37:1d:55:7d:45:19:f0:21:9f:23:13:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:D2:F7:17:B3:C0:16:7D:C0:D1:00:C5:48:DF:4A:B3:08:50:77
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/um3S9xezwBZ9wNEAxUjfSrMIUHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a3:41:df:05:a6:2c:28:98:47:04:63:80:0a:c2:5f:f2:0c:
d2:c7:6d:d0:43:2d:32:32:df:87:4b:9e:97:c1:e0:f1:1f:47:
ae:ea:b7:a1:16:70:b6:26:02:97:05:de:48:2c:55:8b:f9:ec:
64:f4:f5:73:3c:d3:87:1e:19:07:c1:f4:25:aa:78:d9:26:5e:
4f:11:07:3e:7e:e9:01:17:31:eb:3e:77:c3:a8:94:55:2c:94:
c7:2c:74:e5:50:b3:8e:9a:f6:33:d4:c5:f8:7c:94:55:a9:dd:
d2:95:fe:34:fc:ef:32:c1:f7:1c:c1:c9:2b:57:13:68:7b:4e:
8b:58:42:62:7c:d2:3d:df:b4:c5:04:8e:e3:96:bf:05:f6:f2:
2d:fd:6b:29:6d:75:33:a7:9b:6e:2c:d8:b4:ba:7a:56:bf:64:
9a:07:73:8a:ad:bd:c7:fc:c1:a6:dc:af:95:9c:8d:49:7e:6c:
d3:6c:9b:37:fd:1d:74:6e:24:c5:ba:f1:e3:3d:66:8a:29:a5:
fb:7e:dd:d3:b0:24:2d:a8:25:8d:7c:25:0c:dd:05:62:ef:30:
ec:65:c5:7c:b3:6d:63:0a:7f:85:74:3d:65:bb:c1:bb:7c:95:
b6:08:97:a5:bf:27:79:9e:eb:88:53:5f:94:f4:b2:9f:d4:6d:
ca:59:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org